Amendments to the Claims: 



Listing of Claims: 

1 . (Currently Amended) A method for management of a distributed data processing system, 
wherein the distributed data processing system is managed on behalf of a plurality of 
management customers, the method comprising: 

representing the distributed data processing system as a set of scopes, wherein a scope of 
the set of scopes comprises a logical organization of network-related objects; 

associating each scope of the set of scopes with a management customer of the plurality 
of management customers , wherein each scope is uniquely assigned to a given management 
customer of the plurality of management customers , wherein each scope and is uniquely 
associated with a set of configuration parameters for managing the each scope; 

managing the distributed data processing system as a set of logical networks, wherein 
[[a]] each logical network of the set of logical networks comprises a subset of the set of scopes^ 
and wherein each logical network and is uniquely assigned to a particular management customer 
of the plurality of management customers ; and 

allowing an administrative user to dynamically reconfigure the set of logical networks 
within the distributed data processing system to introduce a new scope by logically dividing a 
pre-existing scope of the set of scopes . 

2. (Currently Amended) The method of claim 1 further comprising: 

managing the each scope by a respective IP driver that has dedicated control over objects 
within its responsible scope such that other IP drivers do not have control over the objects 

dynamically reconfiguring the distributed data processing system to introduce a new 
scope by logically dividing a pre existing scope . 

3. (Currently Amended) The method of claim [[2]] 1 wherein the new scope is introduced 
without physically introducing a new network, system, or endpoint to the distributed data 
processing system. 
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4. (Original) The method of claim 1 further comprising: 

dynamically reconfiguring the distributed data processing system by logically moving a 
scope between management customers. 

5. (Original) The method of claim 1 further comprising: 

dynamically reconfiguring the distributed data processing system to introduce a new 
management customer. 

6. (Original) The method of claim 5 wherein the new management customer is introduced 
without physically introducing a new network, system, or endpoint to the distributed data 
processing system. 

7. (Original) The method of claim 1 further comprising: 

dynamically discovering endpoints, systems, and networks within the distributed data 
processing system; 

correspondingly representing endpoints, systems, and networks within the distributed 
data processing system as a set of endpoint objects, system objects, and network objects; and 

logically organizing the endpoint objects, system objects, and network objects within a 
set of scopes, wherein each endpoint object, each system object, and each network object is 
uniquely assigned to a scope such that scopes do not logically overlap. 

8. (Original) The method of claim 7 wherein dynamic discovery is limited to a scope 
assigned to a particular management customer. 

9. (Original) The method of claim 1 further comprising: 

determining whether to allow a reconfiguration operation requested by an administrative 
user in accordance with security authorization parameters associated with an administrative user. 

10. (Original) The method of claim 9 further comprising: 

limiting reconfiguration operations requested by an administrative user to scopes 
assigned to a particular management customer. 
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1 1 . (Currently Amended) An apparatus for management of a distributed data processing 
system, wherein the distributed data processing system is managed on behalf of a plurality of 
management customers, the apparatus comprising a data processor coupled to a memory that 
includes instructions that are operable by the data processor for performing steps of : 

means for representing the distributed data processing system as a set of scopes, wherein 
a scope of the set of scopes comprises a logical organization of network-related objects; 

means for associating each scope of the set of scopes with a management customer of the 
plurality of management customers , wherein each scope is uniquely assigned to a given 
management customer of the plurality of management customers , wherein each scope and is 
uniquely associated with a set of configuration parameters for managing the each scope; 

means for managing the distributed data processing system as a set of logical networks, 
wherein [[a]] each logical network of the set of logical networks comprises a subset of the set of 
scopes , and wherein each logical network and is uniquely assigned to a particular management 
customer of the plurality of management customers ; and 

means for allowing an administrative user to dynamically reconfigure the set of logical 
networks within the distributed data processing system to introduce a new scope by logically 
dividing a pre-existing scope of the set of scopes . 

12. (Currently Amended) The apparatus of claim 11 wherein the instructions are further 
operable for performing a step of further comprising : 

managing the each scope by a respective IP driver that has dedicated control over objects 
within its responsible scope such that other IP drivers do not have control over the objects 

means for dynamically reconfiguring the distributed data processing system to introduce 
a new scope by logically dividing a pre existing scope . 

13. (Currently Amended) The apparatus of claim [[12]] H wherein the new scope is 
introduced without physically introducing a new network, system, or endpoint to the distributed 
data processing system. 
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14. (Currently Amended) The apparatus of claim 11 wherein the instructions are further 
operable for performing a step of further comprising : 

means for dynamically reconfiguring the distributed data processing system by logically 
moving a scope between management customers. 

15. (Currently Amended) The apparatus of claim 11 wherein the instructions are further 
operable for performing a step of further comprising : 

means for dynamically reconfiguring the distributed data processing system to introduce 
a new management customer. 

16. (Original) The apparatus of claim 15 wherein the new management customer is 
introduced without physically introducing a new network, system, or endpoint to the distributed 
data processing system. 

17. (Currently Amended) The apparatus of claim 1 1 wherein the instructions are further 
operable for performing steps of further comprising : 

means for dynamically discovering endpoints, systems, and networks within the 
distributed data processing system; 

means for correspondingly representing endpoints, systems, and networks within the 
distributed data processing system as a set of endpoint objects, system objects, and network 
objects; and 

means for logically organizing the endpoint objects, system objects, and network objects 
within a set of scopes, wherein each endpoint object, each system object, and each network 
object is uniquely assigned to a scope such that scopes do not logically overlap. 

18. (Original) The apparatus of claim 17 wherein dynamic discovery is limited to a scope 
assigned to a particular management customer. 

19. (Currently Amended) The apparatus of claim 1 1 wherein the instructions are further 
operable for performing a step of further comprising : 



Page 5 of 19 
Benfield et al. - 09/895,084 



means for determining whether to allow a reconfiguration operation requested by an 
administrative user in accordance with security authorization parameters associated with an 
administrative user. 

20. (Currently Amended) The apparatus of claim 19 wherein the instructions are further 
operable for performing a step of further comprising : 

means for limiting reconfiguration operations requested by an administrative user to 
scopes assigned to a particular management customer. 

21 . (Currently Amended) A computer program product stored on a computer readable 
storage medium for use in managing a distributed data processing system, wherein the 
distributed data processing system is managed on behalf of a plurality of management customers, 
the computer program product comprising: 

instructions for representing the distributed data processing system as a set of scopes, 
wherein a scope of the set of scopes comprises a logical organization of network-related objects; 

instructions for associating each scope of the set of scopes with a management customer 
of the plurality of management customers , wherein each scope is uniquely assigned to a given 
management customer of the plurality of management customers , wherein each scope and is 
uniquely associated with a set of configuration parameters for managing the each scope; 

instructions for managing the distributed data processing system as a set of logical 
networks, wherein [[a]] each logical network of the set of logical networks comprises a subset of 
the set of scopes , and wherein each logical network and is uniquely assigned to a particular 
management customer of the plurality of management customers ; and 

instructions for allowing an administrative user to dynamically reconfigure the set of 
logical networks within the distributed data processing system to introduce a new scope by 
logically dividing a pre-existing scope of the set of scopes . 
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22. (Currently Amended) The computer program product of claim 21 further comprising: 
instructions for managing the each scope by a respective IP driver that has dedicated 

control over objects within its responsible scope such that other IP drivers do not have control 
over the objects dynamically reconfiguring the distributed data processing system to introduce a 
new scope by logically dividing a pre existing scope . 

23. (Currently Amended) The computer program product of claim [[22]] 21 wherein the new 
scope is introduced without physically introducing a new network, system, or endpoint to the 
distributed data processing system. 

24. (Original) The computer program product of claim 21 further comprising: 
instructions for dynamically reconfiguring the distributed data processing system by 

logically moving a scope between management customers. 

25. (Original) The computer program product of claim 21 further comprising: 
instructions for dynamically reconfiguring the distributed data processing system to 

introduce a new management customer. 

26. (Original) The computer program product of claim 25 wherein the new management 
customer is introduced without physically introducing a new network, system, or endpoint to the 
distributed data processing system. 

27. (Original) The computer program product of claim 21 further comprising: 
instructions for dynamically discovering endpoints, systems, and networks within the 

distributed data processing system; 

instructions for correspondingly representing endpoints, systems, and networks within the 
distributed data processing system as a set of endpoint objects, system objects, and network 
objects; and 

instructions for logically organizing the endpoint objects, system objects, and network 
objects within a set of scopes, wherein each endpoint object, each system object, and each 
network object is uniquely assigned to a scope such that scopes do not logically overlap. 
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28. (Original) The computer program product of claim 27 wherein dynamic discovery is 
limited to a scope assigned to a particular management customer. 

29. (Original) The computer program product of claim 21 further comprising: 
instructions for determining whether to allow a reconfiguration operation requested by an 

administrative user in accordance with security authorization parameters associated with an 
administrative user. 

30. (Original) The computer program product of claim 29 further comprising: 
instructions for limiting reconfiguration operations requested by an administrative user to 

scopes assigned to a particular management customer. 
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